CVE-2026-48288

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Score

CVSS 3.1 3.5 Low

Status

Analyzed - psirt@adobe.com

Published

2026-06-09

Last modified

2026-08-27

Weaknesses

CWE-20

Affected products

• Adobe Experience Manager 6.5 (Adobe)
• Adobe Experience Manager 6.5 Lts (Adobe)
• Adobe Experience Manager As A Cloud Service (Adobe)
• Experience Manager (Adobe)

References

• https://helpx.adobe.com/security/products/experience-manager/apsb26-56.html